DX Unified Infrastructure Management

  • 1.  RSP and Windows Events

    Posted Feb 14, 2012 06:31 PM

    Im trying to configure the RSP probe to monitor for events on Windows Server 2003 and the log shows the following:

     

    Failed to execute command -g ntevents -c 100

     

    The summary report window for the events doesn't show any information, but the processes report does.

     

    Any ideas why?

     

    Also, when trying to monitor Unix is using root the only option?  This won't fly with our security team.



  • 2.  Re: RSP and Windows Events

    Posted Feb 14, 2012 08:30 PM

    Hi Jason,

     

    Just a guess, but it seems that the command internally used by RSP probe is not in PATH and that's why it is displaying "failed to execute command".

     

    Also rsp probe allows you to use SUDO as an alternative to using ROOT account.

     

    Regards,

    Amit Saxena




  • 3.  Re: RSP and Windows Events

    Posted Feb 15, 2012 02:59 AM
    is the rsp probe connecting to the machine at all?

    My only thought is it could be port 135 not being opened. Since the RSP probe uses WMI.

    I could be wrong though.